Download websites that use deepMiner

About deepMiner

Nobody buys a browser miner the way they buy a shopping cart. deepMiner is code that performs mining work in a visitor's browser, and it arrives on a website by one of two routes, either because the operator put it there to earn from traffic, or because somebody else did after getting write access they should not have had. The second route is what makes this fingerprint worth publishing at all.

The project is Open Source and written in JavaScript, published in a public code repository rather than sold, so there is no vendor to contact, no support contract and no licence trail to follow. 2017 is the earliest year we can attach to it, which places it in the short window when mining in the browser was pitched as a serious alternative to advertising and a wave of similar scripts appeared to serve that idea. The window closed. Browser vendors, ad blockers and endpoint security products began treating the whole class as unwanted, and the economics collapsed once mining on consumer hardware stopped paying.

As of October 2026 we record deepMiner on 2 sites, filed under Cryptominers because it belongs to no commercial software category. The number deserves a caveat larger than the number itself. Mining scripts are trivially renamed, minified, proxied through a first party path or rewritten to load from a domain the operator controls, and any one of those defeats a signature based match. Read a count in this range as the installations careless enough to stay recognisable, not as the population of pages doing this work.

What the presence of a miner tells you about a site is mostly a statement about hygiene. A page serving one is usually a page where someone has write access they should not have, or where an abandoned theme, plugin or advertising tag is still being loaded long after anyone last looked at it. Security teams building lists of compromised and neglected hosts, brand safety vendors checking where a client's ads appear, and researchers measuring how long dead malware keeps running all want the same thing, which is the set of domains rather than a verdict on one domain.

A per domain lookup tells you that a site is clean today. The downloadable list tells you which corners of the web still run code everyone else agreed to abandon, and it lets you join those domains against hosting provider, country and the rest of the stack to see whether you are looking at one careless site owner or one careless host.